7af14fee5e8193df7a623ee1f0c0496ffc9a6433e3db26e13000f0e9d0b13596 | Triage

Sharing

General

Target

08e7f6e3d505badadc8b7a85ba575f78_JaffaCakes118
Size

65KB
Sample

241002-e64wzsxdqk
MD5

08e7f6e3d505badadc8b7a85ba575f78
SHA1

2bc5213afd297b69ac5fc54fbd2a597238696a9a
SHA256

7af14fee5e8193df7a623ee1f0c0496ffc9a6433e3db26e13000f0e9d0b13596
SHA512

e5af24e901e5ffd017af9423f592f22e7c0156d81fa5a67b0439e8de4f20b60da2b38558d87c9038487d7dfee5ca5af338b39baafaef89ea7266356829915314
SSDEEP

1536:cSHzlky+G7+IjAXxe4/ZdX0P4AC7rNRQ9Pj372pvyPxY/:j7Crxe4/ZdX0PB6rNRQ9Pj30B

Score

8^/10

discovery persistence

Malware Config

Targets

- Target
  
  08e7f6e3d505badadc8b7a85ba575f78_JaffaCakes118
- Size
  
  65KB
- MD5
  
  08e7f6e3d505badadc8b7a85ba575f78
- SHA1
  
  2bc5213afd297b69ac5fc54fbd2a597238696a9a
- SHA256
  
  7af14fee5e8193df7a623ee1f0c0496ffc9a6433e3db26e13000f0e9d0b13596
- SHA512
  
  e5af24e901e5ffd017af9423f592f22e7c0156d81fa5a67b0439e8de4f20b60da2b38558d87c9038487d7dfee5ca5af338b39baafaef89ea7266356829915314
- SSDEEP
  
  1536:cSHzlky+G7+IjAXxe4/ZdX0P4AC7rNRQ9Pj372pvyPxY/:j7Crxe4/ZdX0PB6rNRQ9Pj30B
Score

8^/10

discovery persistence
- Boot or Logon Autostart Execution: Active Setup
  Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.
  persistence
- Checks computer location settings
  Looks up country code configured in the registry, likely geofence.
- Deletes itself
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

Active Setup

Privilege Escalation

Boot or Logon Autostart Execution

Active Setup

Defense Evasion

Hide Artifacts

Hidden Files and Directories

Modify Registry

Credential Access

Discovery

Query Registry

System Information Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

discoverypersistence

behavioral2